software stack audit